Merge pull request #7212 from mailcow/mkuron-patch-mobileconfig

Escape generated password in mobileconfig
This commit is contained in:
FreddleSpl0it
2026-06-11 10:05:17 +02:00
committed by GitHub
+1
View File
@@ -65,6 +65,7 @@ if (isset($_GET['app_password'])) {
$attr['protocols'][] = 'dav_access'; $attr['protocols'][] = 'dav_access';
} }
app_passwd("add", $attr); app_passwd("add", $attr);
$password = htmlspecialchars($password, ENT_NOQUOTES);
} else { } else {
$app_password = false; $app_password = false;
} }